Rustaurius Ultimate Reviews vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Rustaurius Ultimate Reviews: 1 record(s), with affected versions and fixes.
CVE-2026-24634
Medium · 5.3
CWE-639 Jan 23, 2026
WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Ultimate Reviews ultimate-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Reviews: from n/a through <= 3.2.16.